Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer
File:                     0db67e40-561b-4114-ad6b-0716593573be.cer (raw, json)
Hash identifier:          GIsGdtNNzWVzctms3UOJF8mAYn5Wtex4LM1SN7rKvhw=
Subject key identifier:   35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285846AEBD72C0E6094484524FED00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 Jul 2024 00:45:23 +0000
Certificate not after:    Sat 31 Oct 2026 00:45:23 +0000
Subordinate resources:    IP: 128.254.152.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ae:bd:72:c0:e6:09:44:84:52:4f:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jul 28 00:45:23 2024 GMT
            Not After : Oct 31 00:45:23 2026 GMT
        Subject: CN=0db67e40-561b-4114-ad6b-0716593573be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:12:4d:41:09:f3:97:85:dc:c1:ae:60:59:34:
                    bb:5b:ef:e8:08:b1:1b:c6:45:04:73:15:c2:cb:3f:
                    99:c5:7a:7f:68:5c:c4:7b:c1:3c:3d:73:ce:08:1d:
                    30:85:6b:79:a3:03:17:ef:82:ce:23:75:a7:25:20:
                    12:42:2f:4b:2f:66:06:43:f3:0c:65:04:15:29:98:
                    ec:33:22:fc:50:bd:ab:60:6f:62:fc:a2:ef:55:b6:
                    e7:fc:2a:d7:b4:90:56:f3:91:d0:9f:2d:af:63:b6:
                    69:5f:81:d7:01:6c:a3:12:2c:4e:05:45:d0:07:d2:
                    25:98:72:08:2c:23:b0:e9:a5:a8:1d:28:66:b3:49:
                    41:04:16:0c:d7:31:79:ec:2e:49:a5:d4:97:45:cc:
                    05:f3:7c:38:5d:33:d0:c6:eb:d9:eb:72:f7:68:ef:
                    3e:d0:e6:f9:47:7e:5b:1d:af:a7:80:f7:8d:1a:8a:
                    b5:a9:06:cd:e0:1b:e4:09:b9:a2:d6:66:fc:0f:62:
                    41:ee:32:ec:b4:bc:e7:ba:56:a8:b9:d2:f3:01:91:
                    17:70:9c:d2:c5:07:42:5a:d2:5b:5d:a6:39:12:b6:
                    7a:5e:72:e6:32:ca:50:c9:8e:e0:8e:a6:3b:b1:6a:
                    b3:0a:8c:19:1f:dc:07:4a:1b:a3:da:86:19:2e:97:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e8:f5:83:8b:79:2a:2c:b6:d3:e6:d3:e3:db:56:dd:2b:e0:
         ae:49:32:1c:3b:79:92:17:1a:cd:02:20:49:86:4c:14:a7:e5:
         56:d6:e4:f9:e3:96:ad:6b:60:a3:eb:16:6f:8b:4e:18:c6:3c:
         af:11:15:61:87:14:bb:81:35:6b:c1:fd:39:fb:be:5b:22:34:
         08:c7:10:97:01:7a:5e:c3:82:ef:96:b1:61:d2:89:fc:36:8c:
         7b:a9:de:18:b9:9c:50:21:40:ee:a3:49:ea:50:0b:34:ee:b5:
         de:26:af:6d:c3:45:43:10:91:f5:eb:e1:b0:12:cb:71:b0:ad:
         6b:bc:62:97:af:37:04:92:9b:22:91:48:dc:4b:76:88:2a:5e:
         0d:b7:73:ca:f0:af:77:9c:81:b1:46:b4:43:fa:80:22:f3:54:
         76:08:48:89:8b:13:0a:79:08:3b:8c:e9:ec:d5:53:14:f3:fa:
         ae:21:90:ee:0a:18:0b:8b:1c:c6:00:00:a4:92:b0:4e:e1:98:
         06:af:7a:21:05:d2:f2:97:e1:1d:b4:44:f1:26:c3:fb:fe:a2:
         49:ef:23:1a:ff:81:04:a7:1c:04:9d:97:e8:de:c2:04:23:ba:
         e8:e4:4c:76:3a:d1:40:0b:35:28:bb:72:02:ce:91:ea:43:af:
         c7:a6:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----